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Taming the Wild West of the 21'^ Century 

As a society' we have established and live by a set of rules designed to keep merchjmdise 
and services intended for adults out of the reach of children, hi most states, alcohol sales 
are restricted to iinyone under 21 and 18 to buy tobacco. Entertiiinment rating systems 
are used to determine if the content of movies, music or \'ideo games is suitable to minors. 
Adult content magazines iire kept out of site behind clerk counters in many stores across die 
US. Advertising guidelines iire followed for age-restricted products iuid promotional items. 
Comdcted sexual i)redators are recjuired to register their residence. 

Yet on the Liternet, it is more like we live in the Wild West where anything goes. Logically 
we know all diese rules still apply. But enforcing them is a different situation. 

Kim Cameron, Ai'cliitect of Identity at Microsolt Corjjoration, states the problem cleiuiy 
within his paper on the Laws of Identity': "the Liternet was built without a way to know who 
and what you are connecting to."^ And Peter Steiner, cartoonist at the New Yorker hints at 
the dangers this poses in his well known ciirtoon: "On the Internet, nobody knows you're a 
dog."'^ 

Fortunately, advanced age iuid identity 
verification technology solutions exist tliat 
foster online trust and allow businesses to know 
who their customer is when selling, niiirketing 
or distiibuting age-restricted or age-sensitive 
products, senices or content. The result of 
such solutions is a safer online emironnient for 
kids that supports adult freedom of choice and 
protects sensitive identif\ing information. 



This white paper will review the emerging trends 
in die age and identitA' verification market juid 
examine die benefits of integrating iui electronic 
age verification solution within your business. 



1. Kim Ciuneron, Liifvs ofldcntiti', May 2005, 1 

2. Peter Stciner's cartoon first ajjpciucd in tlic The New Yorker, on July .5, 1998 iuid is reprodueetl in eoni])lianee with the 
eop\Tight law s of the United States 
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Market Drivers Impacting Age 

& Identity Verification 



Comparing Two Worlds 



Physical World 

• Enforced Regulations 

• Age Verification Process 

Physical ID 
Physical presence 

• Inherent Cost of 
Doing Business 



Virtual World 

• Minimum Regulations 

• Age Verification Process 

Honesty Policy 

Credit Card Autiiorization 

• Emerging Acceptance 
and Adoption 



In the bricks imd mortiu" world age-restricted imd age-sensitive protection stiuidards are 
well estiiblished and enforced. We all know the steps such as conipiuing someone's 
physical appearance to iui authentic and legal picture ID like a driver's license. However 
in the virtual world, most companies have not implemented appropriate age verification 
mechiinisms and some have implemented inadecjuate methods. Depending on the reason 
for a verification, there are two methods some businesses use today to verify age - die 
honest\' policy or by credit ciird audiorization. 

Both methods present obstacles and are not considered effective for protecting children 
online. Some of the reasons include: 

• The lionestA' policy does not work - according to one study 31% of 7di-12th graders 

o 

I)retend to be older to get onto a website 

• Kids have their own credit ciuxls 

• Credit card authorization validates die cmd only, not that die person using die credit 
ciuxl is the rightful owner 

• Credit card compiuiies have issued guidelines saying credit ciu ds iu e not a valid 
method of age verification and merchants selling age-restricted products need to have 
die appropriate coiiti'ols in place to ensure diat they abide by the laws governing tiiese 
transactions 



3. The HciiiT J K:ii,SL'r Fiuiiily Founciiitioii, Gcncnttion Mstufh: Mcf/h in the Liics oj t^-IH ycitr-(fl(l'i, Miircli 200,5, 80 
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The aniiizing growth of social networking wehsites has highlighted the need for age 
verification. Recently MySpace.com has heen under fire from attorney generals ahout its 
attempts to address tire dangers die site poses to teens including the opportunity,' for adults 
to interact with minors. The company is now laced with a lawsuit pertaining to idleged 
inappropriate interactions ol an adult widi a minor. 

In an effort to address these complaints, MySpace announced that it will deploy a datahase 
that will contiiin the niunes and physiciil descriptions ol comdcted sex offenders in the United 
States and automaticiilly search lor matches between tlie database and MySpace user profiles, 
hi response to this announcement, Connecticut Attorney General Richard Blumenthid 
described the ineffectiveness ol this measure without age and identity verification by saying, 
"Comdcted sex olfenders ciui swiltly circumvent these protections by using lake niuiies 
- which they ciin do with ease."^ 

Additionally, Xiuiga another social nehvorking site was fined by the Fedenil Trade 
Commission (FTC) over alleged \iolations ol die Children's Online Privacy Protection Act 
(COPPA). The FTC said Xanga collected, used, and disclosed personal information from 
children under the age ol 1 3 without first notifring piirents and obtaining their consent."'' 

Because of the events and issues surrounding sociiil networking sites, attorney generals from 
numerous states have a newly established task force to study die impact and i)otential liiuiii to 
children from im appanmt lack ol lawlessness in online communities. Specificiilly, Blunientliiil 
has called for MySpace to enact several practical steps including initiating a member login witii 
age verification iind restricting access to adult content to individuals 18 or older along with 
other steps. 



4. Aiiit k Jcsdiuiuii, MiSjxicc ^\jiiLS to Keep Scxwil I'icd;it<frs o/I W 'ch site (Associalcti Press) December (i, loiind online ;it 

httl)://vi™nnclystiu-.e()ni/apps/pbcs.<illAirtiele?AID-/20()fil20(VLOCAL17/612()60473/101^ 
.5. Nieholas Ciuson, FTC Nails Xmign uitli Record Fine, (Internetiiews.eom) September 8, 2006, fonnd online at 

htt|j://m™'.intemetnews.e()m/l)us-news/;n'tiele.phlj/363 1181 
6. Riehard Blmnendiid in a letter addressed to Attorney Chrisdne V:u ney ol Ilogim & Har ston LLP in Wa^ihington, D.C., Mjireh 20, 

2006, k)nnd online at http://\™w.et.gov/ag/lib/ag/ehildren/MySpaeebnllels.jKll 
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Parent Controls vs. Corporate Responsibility 

It takes a village to raise a child. Societs^ has decided that we all protect kids together in the physical 
world - from lawmakers iuid husinesses to teachers, cjuegivers and parents. 

Yet, in die \'irtual world, a common argument for not using electronic age verification is tliat it 
is the responsihility of the parent to monitor the online activity of their children. Electronic age 
verification hridges die gap hehveeii parental control and corporate responsihilitN^ hy sendiig to assist 
piuents - particularly since children have access to the Internet outside of dieir home. 

7 

Ahout 17 million youth ages 12-17 use the Internet representing 73% of diose in this age hracket. 
Wliile niiuiy access the Internet at home or school, 60% of teens still report that they use the 

Q 

Internet "somewhere else"— away from home iuid from school. 

Teens m e Jilso sa\'\T Internet users so that rehdiig solely on pju entiil control software and Internet 
filters to protect children online is just not enough. In fact, 64% of teens and 66% of piirents say 
diat online teens know more ahout the Internet tliiui their piu'ents.^ 

Overall, electronic age verification plays an iniportiuit part in assisting parents iuid ciiregivers hy 
enabling businesses to enact the siuiie protection stiuidards online tiiat have been recognized iuid 
enforced in our bricks and mortar world. 
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7. PEW IiitLTiicl & AniL-riciui Life Project. Tccn^igc Life Online, 1 

8. UCLA Center for Coniinunicjition Policy, The UCLA Internet Repoi t— "Sun cyinffliic Digit;il Future "2008, 6,5 

9. PEW Internet & Aliiei ic;ui Life Project, Teenage Life Online, 
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The Age Verification Market 

Electi'onic Age Verification technology' is not new although the adoption of its use has only recently 
started to giiin traction in the market. Any industiy concerned with protecting children online while 
at the same time 5)romoting adult-choice and access to adult content ciui benefit from electronic age 
verification. 

How Electronic Age Verification Works 

So what exactly is Electronic Age Verification? Simply put, it is an automatic way of compiiring 
information provided by the consumer such as name, address juid date of birth against information 
found in thousands of trusted and verifiable data sources. The end result pro\'ides a verification 
that helps businesses insbmtiy mjike more informed decisions regarding their approvals of 
transactions or access grants. 



Step 1 



Consumers provide their name, 
address and other identifiable 
information required such as 
date of birtli. 



Step 2 



Electronic age verification 
solution instantly compares die 
consumers input to thousands 
of trusted data sources 
containing billions of 
verifiable records. 



Step 3 



Based on the verification 
result, die business handles 
the transaction by approving 
it, conducting a deeper level of 
identity' check, or rejecting it. 



Early Adoption by Industry Leaders 



Certain industries have companies that are early adopters of electronic age verification. In May 
200,5, the Supreme Court opened up the direct shipment of wine for re\'iew on a state by state basis. 
Before this ruling, thought-leader wineries such as Kendalbjackson Wine Estates Limited deployed 
age verification and continue to lead the wine industry in using tiiis technology to do tire right tiring 
for their businesses dnd customers. 
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Also in 200,5, the Cellukir Telecommunications Industty Association (CTIA) released the Wireless 
Content Guidelines which carriers follow when developing prognuns that distrihute age -restricted 
iind age-rated content. These guidelines include using content filters and access conti'ol, such as 
electronic age verification, and are designed specific;illy to provide consumers with tools and contiols they 
need to make informed choices when accessing ciurier content. 

Even hefore the Master Setdement Agreement was signed in Novemher 1998 the tohacco industr\' has 
used age verification when marketing cig;iiettes hodi in die hricks and inortiu" workl and also online. 

The most recent early ado])ter comes from the beer industiy. One ol the major brewers amiounced it will 
incorjiorate age verification to access all ol its websites in 2007. This will certcunly address findings irom 
a study conducted by the Center on Alcohol M;iiketing and Youth at Georgetown which estimated that 
13 percent ol visits to idcohol-branded sites were initiated by people under age 21, and that 34 percent of 
in-depth visitors to a brewery's website were underage. ^ ^ This is a sigruficant advancement lor the beer 
industiy which has until now relied on die honesty policy for allowing access to its mai'keting websites. 



Risks of Not Using Electronic Age Verification 

The media's locus on issues surrounding social iiet\vorks as well as die increased accessibility' ol content 
have caught the attention ol lawni;ikers so diat it is no longer a matter ol il, but when, age verification 
will be reciuired ol ecommerce compiuiies providing adult-related content, goods or sendees. However, 
die risks associated with waiting for this mandate and not voluntai'ily electing to deploy im electronic age 
verification solution are immediate. These risks include: 
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10. CTIA Wireless, tlie International Association for Wireless Telecommunications industiy, Wireless Content Guidelines, 
found online at httl)://files.ctia.org/l)df/CTIA_Board_Al)])roved_Gui(lelines.pdf 

1 1. Center lor Alcohol Miuketing and Youth, C'lickjng t\ ith Kids: ^iJcohol Mmkclmg ;in{l J 'oiilli on tJic Internet, March 200 I, 3 
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Brand Reputation 

Negative attention from the media can damage a company's reputation. It is possible that companies 
not tiiking proactive steps to protect children online will become a t;uget for advocacy gi'oups, boycotts 
;urd odier govermnent sponsored initiatives that pose a thi'eat to theii' public perception. And not being 
considered a good corporate citizen inrpacts an important way consumers support brands - with 
dieir wallets. 

Regulatory Compliance Issues 

One of the most complex issues facing ecommerce today concerns regulation. Poor compliance 
measures and lack of due diligence increases liability and minimizes a business's ability to establish 
an affirmative defense through best efforts. Because the Internet allows commerce across multiple 
jurisdictions, different regulation standards of geographies am be tricky. One example is within 
the wine industry which takes regulatory issues ver\' seriously. As a result, compliimce software 
solutions such as ShipCompliimt have emerged tiiat help wineries mimage the complexit\' of 
geographic wine sales regulations including providing built-in electronic age verification technology. 
Wlien any business is unable to show the efforts it has tiiken to promote sales to legal age adults in 
situations involving age-restricted products and sei"vices, the economic impact from legal problems 
and regulatory fines can be significant. 

Financial Risk 

In addition to decreased revenue from negative PR, other fin^mcial impacts include the potential 
for increased spending on miu'keting imd legal costs as well as high penalty fines for failing to meet 
the guidelines under COPPA. And if age verification is himdled mimuidly, compiuiies experience 
slower processing rates and a higher cost of doing business. 

Competitive Position 

Industry-leading companies me often recognized as being fonvard-thinking in tiieir ability,' to 
capitalize on the latest trends and giun market share. Ecommerce companies continuing to operate 
without a way to verify legitimate, age appropriate customers, when others in die industiy iue 
mo\'ing towiird tiiis practice, risk their competitive abilitA' to sustain a successful, revenue-generating 
business. 

To minimize these risks, im automated age verification solution that protects the i)rivacy of adults 
and children witiiout eliminating adult-choice or restricting the flow of ecommerce for a business 
is needed. 
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Industries In Need of Electronic Age Verification: 

Teleconiniunications - content, including age-restiicted mo\'ies, games iuid adult content, is 
becoming more accessible dirough wireless de\'ices 

Retail - the Internet opened up new channels of commerce for eveiyone including age-restricted 
products like wine and cigiu's 

Social Networks - online communities Jillow interaction behveen adult and youth members 
which increases the risk that a child will be approached by a predator. And because it is difficult to 
monitor the viu'ious forms of content available widiin a social network, it is possible for children to 
have access to racey content. Sociiii networks iilso have an added need for identity verification since 
performing sejuches against predator lists is ineffective if die person is not positively identified 

Marketing - applying the same stiuidards for beer, tobacco, dnd adult content advertising and 
dishibution in an um egulated channel 

Entertainment - oi)erates im expimded distribution chimnel for rated-content such as mo\ies, 
music and games containing violent and/or explicit materiiil 

Benefits of Electronic Age Verification 

A number of significant benefits emerge when businesses use electronic age verification including: 

Positive PR Image - Instead of being i)erceived in a negative light, businesses have the 
opportunity' to position themselves positively as doing the right thing iuid being industiy leaders for 
protecting children online. 

Maintains Regulatory Compliance - Witii an elecH-onic age verification system, iill rules 
and regulations under COPPA iu e upheld. By conducting age verification on all transactions, 
you protect your business fi'om the liabilities associated with selling or offering age-restricted or 
age -sensitive products and senices. Electronic age verification abides by society's rules and helps 
businesses establish dn iiffirmative defense through due diligence of best efforts. 
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Overall Brand Protection - Electronic age verification protects a compiuiy's brand reputation 
and establishes the business as a good corporate citizen. 

Improves Financial Results - The use of dn automated electronic solution helps ecommerce 
compiuiies keep the speed of the hiternet and process more tnmsactions. This increases revenue or 
customers faster and it decreases the amount of manual review needed to process transactions tiius 
limiting the amount of lieadcount recjuired to operate your business. Exception tiansactions me 
handled faster and more efficiently tiius freeing up staff to liiuidle other business operations. 

Increases Competitive Position - Early adoption of electronic age verihcation shows 
foi'Wiird thinking iuid helps establish companies as drought leaders. 

Other benefits of electromc age verification include: 

• Protects children 

• Promotes adult-choice 

• Improves customer satisfaction 

• Proactive self-regulation limits die impact of future enforced regulations 



Selecting an Age Verification Vendor 

When looking for a pro\'ider to electronically verify the age and identity' of your consumers, there 
are many factors to consider including: 

Market Experience - Seek a solution provider diat has been working with age verification 
technology' iind olfering a solution for several years. Rather than offering biuid iiid solutions, an 
experienced prcndder will have a proven, mature product and be a leader in the age verification 
market. Be sure to get a list of clients iuid ask for references. 

3rd Party Endorsements - Many industiy organizations Jire dedicated to helping members' 
select tiusted iuid competent providers of viirious sendees imporfcmt to the industry. Look for a 
solution that has 3rd pju ty endorsements from age-related industry organizations either within or 
and outside of your specific industry. A good pnndder will be a tliouglit-leader on age verification 
and will often be sought out by lawmjikers iuid law enforcement as a knowledgeable market expert. 
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Security - Work with a provider that understands securit\' encompasses more than just 
encryiJtion technologies. Tiy to hnd a sokition that wall protect hotli your husiness iuid your 
customers from fraud iuid identity theft. Look for a solution that can verify the age and identity of 
someone without recjuiring sensitive infomiation from the consumer like a social securits^ numher 
or credit histor\'. 

Product Flexibility & Scalability - Seek a solution that answers your immediate needs 
hut ciui easily change iuid grow with the denijuids of your husiness. It should he easy to set up 
jmd chiuige system rules that trigger actions to complete tnmsactions (juicker and without manual 
re\'iew. Work with a pro\'ider that can offer the best mix of products to meet sevenil different levels 
of identity verification. The ideal solution will allow you to take adviuitage of more in-depth identity 
verification techniques when needed so that you can verify someone is who they ckiim. 

Ease of Integration - To help minimize the impact on your business, look for a solution that 
is sendee-based so that you can be up and running in just a few days. Be sure the vendor supports 
a project with braining and documentation such as technical and end user help guides. A good 
pro\'ider will offer several different deployment o5)tions to cover iill the sendee areas wdthin your 
business including your call center. In addition, the solution should not recjuire IT resources to 
maintain or change once it is integrated. 

Due Diligence Efforts - The right solution pro\ddes the necessiuy tnmsaction reporting 
for you to maintain due diligence files. Select a pro\dder that is knowledgeable and awiire of die 
guidelines and rules for establishing an affirmative defense and niiuntains a positive relationship 
with lawmiikers interested in the use of electi'onic age verification. 

Data Protection Standards - Tit to hnd a company tiiat promotes tiie responsible use of 
data. The right solution wdll have strict protocols for using and sharing datii and will not collect and 
store data, nor wdll it i)resent data wdtiiin verification results. Additioiiiiily, it should not be restricted 
to iuiy single data pro\dder and have the abilit\' to access multiple independent data sources. Finally 
the ideal solution should eliminate any impact on credit reports when performing verifications. 

Supports Consumer Privacy - Be sm e to select a vendor that addresses the identity' theft 
crisis by supporting consumer privacy. Different pro\dders have viir\dng philosophies on this 
issue so be sure to select a piirtner that demonstrates die highest level of consumer locate rates 
wdtli input recjuirements diat match your business model and does not over expose sensitive data. 
Additionally, the ideal solution wdll follow idl the guidelines set forth in COPPA. The right vendor 
will consult witii you on the best way to communicate to your customers the protection measures 
you are tiiking dnd will support this by pro\dding scripts to follow and a trusted mark to place on 
your site. 
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The IDology Advantage 

IDology is a best of breed pro\'ider focused solely on delivering leading solutions in the age and 
identitA' verification market. Our real-time, technology,' solutions verify an indi\'iduiil's age iuid 
identity in customer not present transactions such as online or in a ciill center without interrupting 
the transaction. What makes us different is that we do this in a way drat builds more confidence with 
your customers - by protecting sensitive data and promoting consumer privacy. 

IDology's ExpectID Age is recognized by many as the solution setting the industiy standiu'd for 
age verification sendees. ExpectID Age confirms someone's age while supporting the guidelines 
set forth by COPPA and the rules of the credit card associations. Our unicjue patent-jjending 
process instiuitly jmalyzes billions of data records to confirm someone's age in a matter of seconds. 
Wlien situations need more in depth verification, you can take adviuitage of our ExpectID IQ 
solution which offers non-intrusive, intelligent (juestions relating to that person's history such as a 
cluestion invohdng a pre\'ious address or dn associated person. By reciuiring a minimum of niune 
and address only to perform veiifications, your customers are comfortable with the iunount of 
information they are recjuired to shiire. 

ExpectID Age has been endorsed by WineAnerica as the premier solution for its members selling 
wine on the Internet and recently the State of Michigan tested and approved ExpectID Age for all 
direct wine shipments in and out of tire state. Currently, IDology is conducting age verification for 
customers in several age -restricted industries including wine, distilled spirits, tobacco, and other 
age-rated vendors and senices. Additionally, our product is integrated within several other solutions 
sei"ving the telecommunications and wine industries including a niiuiaged senice for mobile content; 
ShipCompliant, a wine industiy leader in ecommerce and compliance solutions; Nexteniiii's 
e-shopping ciut; and within the ecommerce off erings of one of the largest e-markets for the wine 
industry, the Wine Web. 

Designed to offer complete ffexibilitA', IDologA^'s solutions run on an advanced, rules-based platform 
engine wiiich enables clients to configure their solution based on defined business rules specific to 
their niiu'ket, including performing verifications through a hand held de\ice. And as the demands 
of the niiirket change, you can change these business rules in real-time without having to rely on IT 
resources. 

Using a patent-pending process to return (juick, accurate results, our solutions are backed by 
miLximum uptime and state-of-the-art facilities. 
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The ExpectID product suite includes: 

ExpectID Age - confirms someone's age and supports COPPA guidelines and rules of the 
Credit Cmd Association 

ExpectID - locates a viilid ID based on name iind address only; ciui incorporate SSN4 and DOB 

ExpectID IQ - advanced verification process that presents robust multiple-choice ciuestions 
related to someone's personiil history 

All ol our solutions are easy to deploy and offer several different deliveiy methods to have you up 
iind running (juickly. 

Take the first step toward protecting children online while protecting 
your business by scheduling a product demonstration. Call 866-520-1234 
or email info@idology.com to set up an appointment. 



r 

IDOLOGY 

280 Interstate North Circle SE 
Suite 610 

Atlanta, GA 30339 

86(i-,)2()-1234 

w\™'.IDolog\'.com 
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